Attestation¶
Core Idea¶
A verifiable, principal-binding, tamper-evident mark applied to a specific artifact, such that a third party can later confirm — without trusting the signer or the holder — who committed to what, and that the artifact is unaltered since the mark was applied.
How would you explain it like I'm…
The Wax Seal
The Unfakeable Mark
Tamper-Evident Binding
Broad Use¶
- Law and diplomatics: Wax seals, notarised signatures, apostilles, and witnessed wills bind a person to a document.
- Science: Citations, peer-review badges, and preregistration timestamps bind an author to a claim.
- Finance and audit: A partner-signed audit opinion attests that a stated standard was applied.
- Cryptography: Digital signatures and X.509 certificate chains bind a key-holder to data.
- Supply chains: Hallmarks on gold, certificates of origin, and pharmaceutical serialisation bind provenance to goods.
- Software: Code signing and build-provenance attestations bind a binary to its source revision.
Clarity¶
It separates the binding — this artifact, by this principal, unaltered — from everything else the artifact might be evaluated for, such as truth, fitness, or ongoing validity.
Manages Complexity¶
It collapses a catalogue of seals, signatures, certificates, and hallmarks into one object — a binding against an anchor with tamper-evidence — with one maintenance discipline focused on the anchor.
Abstract Reasoning¶
It supports a three-place model — principal bound to artifact against an anchor — whose failure modes (key compromise, anchor compromise) and recovery moves (revocation, rotation, re-attestation) are substrate-portable.
Knowledge Transfer¶
- Cryptography to audit: Transparency logs and key rotation port into firm rotation and conflict disclosure.
- Notarial practice to software: Witness requirements and register-keeping port into signed-build hygiene and key custody.
- Universally: The anchor is the standing weak point everywhere; the recurring task is to keep it uncompromised and ready to rotate.
Example¶
A notary's seal attests only that a particular person signed a particular deed on a particular date — it does not certify that the grantor owns the property or that the contents are true.
Relationships to Other Abstractions¶
Current abstraction Attestation Prime
Parents (1) — more general patterns this builds on
-
Attestation is a kind of Authentication Prime
Attestation binds identity to evidence via a verifiable tamper-evident mark, which is exactly authentication's evidence-binding structure specialized to non-repudiable marks.
Children (2) — more specific cases that build on this
-
Digital signature Domain-specific is a kind of Attestation
A Digital Signature is Attestation implemented with a private-key mark, public-key trust anchor, message digest, and deterministic public check.
-
Provenance Prime is part of, conditional Attestation
Provenance contains Attestations when point-in-time principal-and-artifact bindings secure links in its multi-step history.
Condition / exception The provenance history records transfers or transformations through verifiable principal-and-artifact bindings.
Hierarchy path (1) — routes to 1 parentless root
- Attestation → Authentication
Not to Be Confused With¶
- Attestation is not Data Integrity because attestation binds a principal to content with public verifiability against an anchor, whereas data integrity is only the bare property that content has not changed.
- Attestation is not Verification because attestation is the architecture (mark plus anchor) that makes a binding checkable, whereas verification is the act a party performs on an attestation.
- Attestation is not Provenance because attestation is a point-in-time binding of one principal to one artifact, whereas provenance is the full documented chain of custody.